step-up-authentication

Keycloak Workshop for Step Up with MFA Biometrics Authentication (Passkeys) and Passwordless experience with Passkeys

How to implement Step-up Authentication using Amazon Cognito

Presence human-verification plugin for Kong Gateway

Step-up authentication for a Claude agent: destructive actions are held until a fresh human re-authentication, checked server-side on auth_time freshness. Built with Kinde.

A typed Node service that decides when a fintech payment event needs a fresh phone OTP, with zod-validated bodies and an auditable decision record.

Keycloak 26.x PoC: choose the login method (password / passkey / X.509) from the requested OIDC acr_values, natively via client policies. Includes docker-compose, realm import, Postman collection, and tests.

Go library implementing RFC 9470 OAuth 2.0 Step-Up Authentication Challenge

Sessions as records about a subject and a tenant: device lists, per-account revocation, replay detection, step-up re-authentication, concurrency caps and pluggable stores.

Auth0 for AI Agents — demo técnico de autorización escalonada (scope OAuth, step-up MFA, Guardian push HIL asíncrono) para agentes de IA que ejecutan pagos en banca corporativa.